72 Commits

Author SHA1 Message Date
javi%netscape.com
102f8d04c2 Check to make sure we're still logged into a slot when trying
to re-use a client-auth session.


git-svn-id: svn://10.0.0.236/trunk@101649 18797224-902f-48f8-a5cc-f745e15eee43
2001-08-22 22:50:26 +00:00
nelsonb%netscape.com
eb9c042167 Fix bug 68869. Don't ignore TLS no certificate messages when the server
requires client auth.  Work around bug in NT TCP stack by only shutting
down the socket for SEND (not for BOTH) after sending a bad_certificate
alert.  This avoids bogus CONNECTION_RESET_BY_PEER errors at the client.


git-svn-id: svn://10.0.0.236/trunk@97079 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-13 21:14:54 +00:00
nelsonb%netscape.com
50cb1eea79 Fix bug that caused version number to be wrong in SSL3 client hellos
when restarting an SSL3 (not TLS) session.  (no bug number)


git-svn-id: svn://10.0.0.236/trunk@96372 18797224-902f-48f8-a5cc-f745e15eee43
2001-06-05 00:26:37 +00:00
nelsonb%netscape.com
b2661ccb4d Implementation of 5 DHE ciphersuites, client side only.
Contributed by Dr Stephen Henson <stephen.henson@gemplus.com>


git-svn-id: svn://10.0.0.236/trunk@91917 18797224-902f-48f8-a5cc-f745e15eee43
2001-04-11 00:29:18 +00:00
nelsonb%netscape.com
5b276cd67e Fix a couple of memory leaks that occur in rare error paths.
git-svn-id: svn://10.0.0.236/trunk@90938 18797224-902f-48f8-a5cc-f745e15eee43
2001-03-31 02:49:59 +00:00
nelsonb%netscape.com
c603a294b4 Reinterpret the READ and WRITE poll flags depending on the state of the
socket and the SSL handshake.  Rename the badly named "connected" flag.
Bugzilla bugs 56924, 56926, 66706.
Modified Files:
    ssl3con.c sslauth.c sslcon.c ssldef.c sslgathr.c sslimpl.h
    sslsecur.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@89723 18797224-902f-48f8-a5cc-f745e15eee43
2001-03-16 23:26:06 +00:00
nelsonb%netscape.com
870eb23c89 Coalesce the final Finished message in the SSL handshake and the first
record of application data into a single write, when possible, to avoid
TCP's "Nagle" delays.  Fixes bug 67898.  r&a: wtc.  Modified Files:
	ssl3con.c sslimpl.h sslsecur.c sslsock.c


git-svn-id: svn://10.0.0.236/trunk@86398 18797224-902f-48f8-a5cc-f745e15eee43
2001-02-07 00:34:56 +00:00
wtc%netscape.com
50931f27c7 Bugzilla bug #66367: rename the internal NSS functions that we have to
export from the NSS shared library.  Reviewed by Bob Relyea.
Modified Files:
	nss/lib/certdb/certdb.c nss/lib/certdb/pcertdb.c
	nss/lib/nss/Makefile nss/lib/nss/manifest.mn
	nss/lib/nss/nss.def nss/lib/pk11wrap/pk11skey.c
	nss/lib/pkcs12/p12d.c nss/lib/pkcs12/p12e.c
	nss/lib/pkcs12/p12local.c nss/lib/pkcs7/certread.c
	nss/lib/pkcs7/p7decode.c nss/lib/pkcs7/p7encode.c
	nss/lib/smime/cmsutil.c nss/lib/softoken/secpkcs5.c
	nss/lib/ssl/ssl3con.c nss/lib/ssl/sslcon.c
	nss/lib/ssl/sslnonce.c nss/lib/ssl/sslsnce.c
	nss/lib/util/nsslocks.c
Added Files:
	nss/lib/nss/nssrenam.h


git-svn-id: svn://10.0.0.236/trunk@85774 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-30 21:02:28 +00:00
nelsonb%netscape.com
3aa312f741 Send SSL 3.x alert records when a version mismatch occurs.
Use the other party's version number to decide which alert to send.
Bug 65142.  R&A: relyea.


git-svn-id: svn://10.0.0.236/trunk@84914 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-13 02:32:39 +00:00
nelsonb%netscape.com
8eaac606a9 Add implementation of SSL_RSA_WITH_RC4_128_SHA SSL3 cipher suite,
which is not enabled by default.  Bug 59795.


git-svn-id: svn://10.0.0.236/trunk@84913 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-13 02:05:15 +00:00
nelsonb%netscape.com
dbd95a18a1 Changes to deal with exporting data from Windows DLLs.
SECHashObjects[] is no longer exported.
New function HASH_GetHashObject returns pointer to selected const object.
SSL statistics are now in a structure whose address is obtained via a
call to SSL_GetStatistics().
On NT, the new symbol NSS_USE_STATIC_LIBS must be declared in programs
that use the static SSL library.
Also, propagate "const" declaration for SECHashObjects.


git-svn-id: svn://10.0.0.236/trunk@84403 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-05 01:38:26 +00:00
larryh%netscape.com
18549422d1 Bugzilla: 64132. NSS lock instrumentation
git-svn-id: svn://10.0.0.236/trunk@84300 18797224-902f-48f8-a5cc-f745e15eee43
2001-01-03 19:51:22 +00:00
nelsonb%netscape.com
56ecdac735 Release the SpecRead Lock before returning in an error path.
This bug was found while reading code looking for a different bug.


git-svn-id: svn://10.0.0.236/trunk@82519 18797224-902f-48f8-a5cc-f745e15eee43
2000-11-10 01:36:26 +00:00
nelsonb%netscape.com
c2af931e2d Remove duplicate PORT_Free call. Fix bug 52633.
git-svn-id: svn://10.0.0.236/trunk@79173 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-14 20:25:26 +00:00
jgmyers%netscape.com
ed7132b5a2 support IPv6 in ssl: bug 48657 r=nelsonb
git-svn-id: svn://10.0.0.236/trunk@78892 18797224-902f-48f8-a5cc-f745e15eee43
2000-09-12 20:15:44 +00:00
nelsonb%netscape.com
475a5fabb5 Emulate an SSL3 client more closely after a server negotiates down to 3.0.
git-svn-id: svn://10.0.0.236/trunk@75822 18797224-902f-48f8-a5cc-f745e15eee43
2000-08-08 22:54:02 +00:00
nelsonb%netscape.com
73f5156cca Fix the logic in client and server to detect version roll-back attack,
rolling back from TLS (SSL 3.1) to SSL 3.0.  Provide a new SSL socket
option to disable roll-back detection in servers, since certain TLS
clients are doing it incorrectly.


git-svn-id: svn://10.0.0.236/trunk@70708 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-24 03:35:23 +00:00
mcgreer%netscape.com
34b54eb2f3 Changing MIN's and MAX's to PR_MIN, PR_MAX
git-svn-id: svn://10.0.0.236/trunk@70448 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-18 15:32:18 +00:00
nelsonb%netscape.com
e3773fbadf In ssl3_GenerateSessionKeys() ensure params secitem always points to valid
CK_SSL3_MASTER_KEY_DERIVE_PARAMS structure.  Bugzilla bug 39682.


git-svn-id: svn://10.0.0.236/trunk@70422 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-18 00:41:38 +00:00
dougt%netscape.com
1931899568 Minor changes to fix mac build bustages.
git-svn-id: svn://10.0.0.236/trunk@69424 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-12 18:43:28 +00:00
nelsonb%netscape.com
c1434fd985 Small optimization for RSA Server Key exchange message. Uses fewer PK11_
calls to do the job. Also, plug one mem leak in Fortezza code.


git-svn-id: svn://10.0.0.236/trunk@68753 18797224-902f-48f8-a5cc-f745e15eee43
2000-05-08 23:55:05 +00:00
relyea%netscape.com
a4d4d45374 Initial NSS Open Source checkin
git-svn-id: svn://10.0.0.236/trunk@64788 18797224-902f-48f8-a5cc-f745e15eee43
2000-03-31 20:13:40 +00:00